Freely subscribe to our NEWSLETTER

Much like power grids and water systems, the ubiquity of internet access has made it a core piece of our critical infrastructure. As the backbone of societal operations around the world – it isn’t surprising we’re seeing more and more attacks that target internet service providers specifically; similar to the Halliburton attack last week.

This exploitation conducted by Volt Typhoon is another example in a long string of attacks that the group has conducted. The People’s Republic of China continues to be the most concerning strategic adversary to the United States. These actions, and many others over the last few years, show us that the cyber elements of the PLA, as exemplified by Volt Typhoon, are preparing for possible conflict and continuing to steal intellectual property and other information at an aggressive pace.

This isn’t just a worry for the US, but for the UK and beyond. Previously, we’ve seen APT 27 and other groups launch similar attacks across the EMEA region – with German authorities naming the gang as responsible for attacks on German pharmaceutical and technology companies.

This attack targeting Versa servers allows the hackers to pivot into the many other networks connected to Versa’s servers. We’ve seen this tactic leveraged time and time again in major incidents like the SolarWinds breach – further proving how critical it remains to have visibility and control over the security of each application in your supply chain to mitigate the risk of hackers compromising your organization through a third-party vendor.